75d04a78ac067d567a8de867b814f2d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75d04a78ac067d567a8de867b814f2d8_JaffaCakes118
Size

32KB
MD5

75d04a78ac067d567a8de867b814f2d8
SHA1

dbb824c74c95554356641437885c1ddda04d9d35
SHA256

a85107573c3b2a7615dc4f6ab0904b8b1c2121133475ff2b8dff5cb9a98b175e
SHA512

43200e82ba98ca317d642f4ebfa91b4a852a951c9f1f86ac5a48e43701229611e144c8976e7a39cb7f5f213ae75f83a9018211534b34beeabe15e4f1ed984589
SSDEEP

768:kuLY6swUP4u9SrfHmSPDT6b93JlLcf7ACN0zYl:bLY6pqSrHpPn6BLcfXz

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
75d04a78ac067d567a8de867b814f2d8_JaffaCakes118
unpack001/out.upx

Files

75d04a78ac067d567a8de867b814f2d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ